طلب تحليل التقرير وحل المشكله هذي

  • بادئ الموضوع بادئ الموضوع S U L T A N
  • تاريخ البدء تاريخ البدء
  • المشاهدات 1,026
الحالة
مغلق و غير مفتوح للمزيد من الردود.
S

S U L T A N

زيزوومي جديد
إنضم
21 أكتوبر 2007
المشاركات
38
مستوى التفاعل
0
النقاط
40
غير متصل
هذا التقرير وطلب تحليله اذا ممكن


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 03:19:32 م, on 16/01/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Intel\Wireless\Bin\ZcfgSvc.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\Intel\Wireless\Bin\1XConfig.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Dell\QuickSet\quickset.exe
C:\Program Files\Apoint\Apoint.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb07.exe
C:\Program Files\Apoint\Apntex.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
C:\Program Files\Creative\Creative Live! Cam\VideoFX\StartFX.exe
C:\WINDOWS\V0250Mon.exe
C:\Program Files\Creative\Shared Files\CTSched.exe
C:\Program Files\Error Nuker\bin\ErrorNuker.exe
C:\WINDOWS\FixCamera.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe
C:\Program Files\Creative\Creative Live! Cam\Live! Cam Manager\CTLCMgr.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Ares\Ares.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHid.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHsp.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosAVRC.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\tosOBEX.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\tosBtProc.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
C:\Program Files\Hotspot Shield\bin\openvpnas.exe
C:\Program Files\Dell\QuickSet\NICCONFIGSVC.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Admin\Desktop\Zyzoom_HijackThis.exe
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 212.107.116.243:8080
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: AF BHO - {B7154C4D-87C0-4A2C-AB64-DA132BAC2EE6} - C:\Program Files\AnchorFree\bin\AFBho.dll
O3 - Toolbar: AFToolbar - {1F385865-F3D4-41ff-960D-7B7D0A7A72F6} - C:\Program Files\AnchorFree\bin\AFToolbar.dll
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [Dell QuickSet] C:\Program Files\Dell\QuickSet\quickset.exe
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint\Apoint.exe
O4 - HKLM\..\Run: [IntelWireless] C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe /tf Intel PROSet/Wireless
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb07.exe
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe"
O4 - HKLM\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions
O4 - HKLM\..\Run: [AVFX Engine] C:\Program Files\Creative\Creative Live! Cam\VideoFX\StartFX.exe
O4 - HKLM\..\Run: [V0250Mon.exe] C:\WINDOWS\V0250Mon.exe
O4 - HKLM\..\Run: [CreativeTaskScheduler] "C:\Program Files\Creative\Shared Files\CTSched.exe" /logon
O4 - HKLM\..\Run: [Error Nuker] C:\Program Files\Error Nuker\bin\ErrorNuker.exe autostart
O4 - HKLM\..\Run: [FixCamera] C:\WINDOWS\FixCamera.exe
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [Creative Live! Cam Manager] "C:\Program Files\Creative\Creative Live! Cam\Live! Cam Manager\CTLCMgr.exe"
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [ares] "C:\Program Files\Ares\Ares.exe" -h
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Bluetooth Manager.lnk = ?
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Web Anti-Virus - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\scieplugin.dll
O9 - Extra button: إرسال إلى OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: إر&سال إلى OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: PalTalk - {4EAFEF58-EEFA-4116-983D-03B49BCBFFFE} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: Internet Cleaner - {45819E58-6E84-4A5D-BD65-A706981E5BE8} - C:\Documents and Settings\Admin\Desktop\ICleaner.exe (HKCU)
O9 - Extra 'Tools' menuitem: Internet Cleaner - {45819E58-6E84-4A5D-BD65-A706981E5BE8} - C:\Documents and Settings\Admin\Desktop\ICleaner.exe (HKCU)
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {4A85DBE0-BFB2-4119-8401-186A7C6EB653} - http://messenger.zone.msn.com/binary/MJSS.cab69309.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w2/resources/MSNPUpld.cab
O16 - DPF: {6924091F-CD97-41E1-B1D4-D9079409D413} (IMCv1 Control) - http://208.98.1.254/imscp/talk.cab
O16 - DPF: {9E45BE3C-DE06-4492-AB7D-E51447CF2ED0} (clsUMS Class) - http://qtr8.talkok.com/imscp/talka.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://www.creative.com/su2/CTL_V02002/ocx/15030/CTPID.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Ares Chatroom server (AresChatServer) - Ares Development Group - C:\Program Files\Ares\chatServer.exe
O23 - Service: Kaspersky Anti-Virus 6.0 (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
O23 - Service: EvtEng - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: Hotspot Shield Service (HotspotShieldService) - Unknown owner - C:\Program Files\Hotspot Shield\bin\openvpnas.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NICCONFIGSVC - Dell Inc. - C:\Program Files\Dell\QuickSet\NICCONFIGSVC.exe
O23 - Service: RegSrvc - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: WLANKEEPER - Intel® Corporation - C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
--
End of file - 9739 bytes
 

ترتيب حسب التاريخ ترتيب حسب الأصوات
اشر علي هذه القيم ثم اضغط علي fix checked لتعطيلها


C:\Documents and Settings\Admin\Desktop\Zyzoom_HijackThis.exe

O9 - Extra button: Internet Cleaner - {45819E58-6E84-4A5D-BD65-A706981E5BE8} - C:\Documents and Settings\Admin\Desktop\ICleaner.exe (HKCU)

O9 - Extra 'Tools' menuitem: Internet Cleaner - {45819E58-6E84-4A5D-BD65-A706981E5BE8} - C:\Documents and Settings\Admin\Desktop\ICleaner.exe (HKCU)

وهذا مثال لطريقة الحذف

wh_46239123.png


بعدين روح الي لوحة التحكم >>> اضافة وازالة البرامج >>> واحذف اي تولبار

وبعد اعادة تشغيل الجهاز استخدم هذه الأداة

,, حمل هذه الاداة ,,
واتبع الشرح التالي ,, لتنظيف جهازك من الفيروسات
و عمل تقرير بالعمليه حتى ترفقه بردك القادم ,,
http://www.zyzoom.net/zyzoom_absba_...Scan&AntiSpyware_8.5i_Enterprise_Portable.exe
شرح الاستخدام ,,,,,,

000.png


ولحفظ التقرير اعمل التالي ,,

001.png


002.png


بعدهاا ارفع التقرير على هذا الموقع ,, وارفق الرابط بردك القادم
http://www.zshare.net/​
 
توقيع : ابن الملوك
تأييد 0
تأييد 0
08/01/1429 06:26:07 م Engine version =5200.2160
08/01/1429 06:26:07 م AntiVirus DAT version =5175.0000
08/01/1429 06:26:07 م Number of detection signatures in EXTRA.DAT =None
08/01/1429 06:26:07 م Names of detection signatures in EXTRA.DAT =None
08/01/1429 06:26:02 م Scan Started SAW\Admin On-Demand Scan
08/01/1429 06:26:33 م Deleted Admin c:\documents and settings\admin\s\admin@2o7
[2].txt\00000000.ie -2O7(Potentially Unwanted Program)
08/01/1429 06:26:36 م Deleted Admin c:\documents and
settings\admin\s\admin@ad.yieldmanager[1].txt\00000000.ie -Yieldmanager
(Potentially Unwanted Program)
08/01/1429 06:26:36 م Deleted Admin c:\documents and
settings\admin\s\admin@ad.yieldmanager[1].txt\00000000.ie -Yieldmanager
(Potentially Unwanted Program)
08/01/1429 06:26:36 م Deleted Admin c:\documents and
settings\admin\s\admin@ad.yieldmanager[1].txt\00000000.ie -Yieldmanager
(Potentially Unwanted Program)
08/01/1429 06:26:36 م Deleted Admin c:\documents and
settings\admin\s\admin@ad.yieldmanager[1].txt\00000000.ie -Yieldmanager
(Potentially Unwanted Program)
08/01/1429 06:26:36 م Deleted Admin c:\documents and
settings\admin\s\admin@ad.yieldmanager[1].txt\00000000.ie -Yieldmanager
(Potentially Unwanted Program)
08/01/1429 06:26:36 م Deleted Admin c:\documents and
settings\admin\s\admin@ad.yieldmanager[1].txt\00000000.ie -Yieldmanager
(Potentially Unwanted Program)
08/01/1429 06:26:36 م Deleted Admin c:\documents and
settings\admin\s\admin@ad.yieldmanager[1].txt\00000000.ie -Yieldmanager
(Potentially Unwanted Program)
08/01/1429 06:26:36 م Deleted Admin c:\documents and
settings\admin\s\admin@ad.yieldmanager[1].txt\00000000.ie -Yieldmanager
(Potentially Unwanted Program)
08/01/1429 06:26:36 م Deleted Admin c:\documents and
settings\admin\s\admin@atdmt[2].txt\00000000.ie -Atdmt(Potentially Unwanted
Program)
08/01/1429 06:26:37 م Deleted Admin c:\documents and
settings\admin\s\admin@doubleclick[1].txt\00000000.ie -Doubleclick
(Potentially Unwanted Program)
08/01/1429 06:26:37 م Deleted Admin c:\documents and
settings\admin\s\admin@fastclick[1].txt\00000000.ie -Fastclick(Potentially
Unwanted Program)
08/01/1429 06:26:37 م Deleted Admin c:\documents and
settings\admin\s\admin@fastclick[1].txt\00000000.ie -Fastclick(Potentially
Unwanted Program)
08/01/1429 06:26:37 م Deleted Admin c:\documents and
settings\admin\s\admin@fastclick[1].txt\00000000.ie -Fastclick(Potentially
Unwanted Program)
08/01/1429 06:26:37 م Deleted Admin c:\documents and
settings\admin\s\admin@fastclick[1].txt\00000000.ie -Fastclick(Potentially
Unwanted Program)
08/01/1429 06:26:37 م Deleted Admin c:\documents and
settings\admin\s\admin@fastclick[1].txt\00000000.ie -Fastclick(Potentially
Unwanted Program)
08/01/1429 06:26:37 م Deleted Admin c:\documents and
settings\admin\s\admin@fastclick[1].txt\00000000.ie -Fastclick(Potentially
Unwanted Program)
08/01/1429 06:26:38 م Deleted Admin c:\documents and
settings\admin\s\admin@metacafe.122.2o7[1].txt\00000000.ie -2O7(Potentially
Unwanted Program)
08/01/1429 06:26:38 م Deleted Admin c:\documents and
settings\admin\s\admin@msnaccountservices.112.2o7[1].txt\00000000.ie -2O7
(Potentially Unwanted Program)
08/01/1429 06:26:38 م Deleted Admin c:\documents and
settings\admin\s\admin@msnportal.112.2o7[1].txt\00000000.ie -2O7(Potentially
Unwanted Program)
08/01/1429 06:26:38 م Deleted Admin c:\documents and settings\admin\s\admin@pro-
market[2].txt\00000000.ie -ProMarket(Potentially Unwanted Program)
08/01/1429 06:26:38 م Deleted Admin c:\documents and settings\admin\s\admin@pro-
market[2].txt\00000000.ie -ProMarket(Potentially Unwanted Program)
08/01/1429 06:26:38 م Deleted Admin c:\documents and settings\admin\s\admin@real
[1].txt\00000000.ie -Real(Potentially Unwanted Program)
08/01/1429 06:26:38 م Deleted Admin c:\documents and settings\admin\s\admin@real
[1].txt\00000000.ie -Real(Potentially Unwanted Program)
08/01/1429 06:26:39 م Deleted Admin c:\documents and
settings\admin\s\admin@server.iad.liveperson[2].txt\00000000.ie -
Liveperson(Potentially Unwanted Program)
08/01/1429 06:26:39 م Deleted Admin c:\documents and
settings\admin\s\admin@server.iad.liveperson[2].txt\00000000.ie -
Liveperson(Potentially Unwanted Program)
08/01/1429 06:26:39 م Deleted Admin c:\documents and
settings\admin\s\admin@specificclick[1].txt\00000000.ie -SpecClick
(Potentially Unwanted Program)
08/01/1429 06:26:39 م Deleted Admin c:\documents and
settings\admin\s\admin@specificclick[1].txt\00000000.ie -SpecClick
(Potentially Unwanted Program)
08/01/1429 06:26:39 م Deleted Admin c:\documents and
settings\admin\s\admin@specificclick[1].txt\00000000.ie -SpecClick
(Potentially Unwanted Program)
08/01/1429 06:26:39 م Deleted Admin c:\documents and
settings\admin\s\admin@specificclick[1].txt\00000000.ie -SpecClick
(Potentially Unwanted Program)
08/01/1429 06:26:39 م Deleted Admin c:\documents and
settings\admin\s\admin@specificclick[1].txt\00000000.ie -SpecClick
(Potentially Unwanted Program)
08/01/1429 06:26:39 م Deleted Admin c:\documents and
settings\admin\s\admin@tribalfusion[2].txt\00000000.ie -Tribalfusion
(Potentially Unwanted Program)
08/01/1429 06:26:40 م Deleted Admin c:\documents and
settings\admin\s\admin@yadro[1].txt\00000000.ie -Yadro(Potentially Unwanted
Program)
08/01/1429 06:26:40 م Deleted Admin c:\documents and settings\admin\s\admin@zedo
[1].txt\00000000.ie -Zedo(Potentially Unwanted Program)
08/01/1429 06:26:40 م Deleted Admin c:\documents and settings\admin\s\admin@zedo
[1].txt\00000000.ie -Zedo(Potentially Unwanted Program)
08/01/1429 06:26:40 م Deleted Admin c:\documents and settings\admin\s\admin@zedo
[1].txt\00000000.ie -Zedo(Potentially Unwanted Program)
08/01/1429 06:26:40 م Deleted Admin c:\documents and settings\admin\s\admin@zedo
[1].txt\00000000.ie -Zedo(Potentially Unwanted Program)
08/01/1429 06:26:40 م Deleted Admin c:\documents and settings\admin\s\admin@zedo
[1].txt\00000000.ie -Zedo(Potentially Unwanted Program)
08/01/1429 06:33:14 م Not scanned (The file is encrypted) Admin c:\Documents and
Settings\All Users\Application Data\Kaspersky Lab\AVP6
\PdmHist\aa0.5D40E71A01C85852.history\00000004.bak\RUN.EXE
08/01/1429 06:51:30 م Not scanned (The file is encrypted) Admin c:\Program
Files\Lavasoft\Ad-Aware SE Personal\Skins\Ad-Aware SE default.ask\AD-AWARE SE DEFAULT.SKN
08/01/1429 07:10:58 م Not scanned (The file is encrypted) Admin c:\System Volume
Information\_restore{83F6D9BC-C235-4BD2-B6B0-6BA84DD57502}\RP141
\A0042301.exe\AVVCLEAN.DAT
08/01/1429 07:22:42 م Cleaned Admin c:\WINDOWS\system32\drivers\etc\hosts
Generic QHosts.c(Trojan)
08/01/1429 07:22:43 م Cleaned Admin c:\WINDOWS\system32\drivers\etc\hosts.msn
Generic QHosts.c(Trojan)
08/01/1429 07:28:24 م Scan Summary SAW\Admin Scan Summary
08/01/1429 07:28:24 م Scan Summary SAW\Admin Processes scanned : 56
08/01/1429 07:28:24 م Scan Summary SAW\Admin Processes detected : 0
08/01/1429 07:28:24 م Scan Summary SAW\Admin Processes cleaned : 0
08/01/1429 07:28:24 م Scan Summary SAW\Admin Boot sectors scanned : 2
08/01/1429 07:28:24 م Scan Summary SAW\Admin Boot sectors detected: 0
08/01/1429 07:28:24 م Scan Summary SAW\Admin Boot sectors cleaned : 0
08/01/1429 07:28:24 م Scan Summary SAW\Admin Files scanned : 59726
08/01/1429 07:28:24 م Scan Summary SAW\Admin Files with detections: 2
08/01/1429 07:28:24 م Scan Summary SAW\Admin File detections : 2
08/01/1429 07:28:24 م Scan Summary SAW\Admin Files cleaned : 2
08/01/1429 07:28:24 م Scan Summary SAW\Admin Files deleted : 0
08/01/1429 07:28:24 م Scan Summary SAW\Admin Files not scanned : 31
08/01/1429 07:28:24 م Scan Summary SAW\Admin Scan Summary (Registry Scanning)
08/01/1429 07:28:24 م Scan Summary SAW\Admin Keys scanned : 37916
08/01/1429 07:28:24 م Scan Summary SAW\Admin Keys detected : 0
08/01/1429 07:28:24 م Scan Summary SAW\Admin Keys cleaned : 0
08/01/1429 07:28:24 م Scan Summary SAW\Admin Keys deleted : 0
08/01/1429 07:28:24 م Scan Summary SAW\Admin Scan Summary ( Scanning)
08/01/1429 07:28:24 م Scan Summary SAW\Admin s scanned : 501
08/01/1429 07:28:24 م Scan Summary SAW\Admin s detected : 38
08/01/1429 07:28:24 م Scan Summary SAW\Admin s cleaned : 0
08/01/1429 07:28:24 م Scan Summary SAW\Admin s deleted : 38
08/01/1429 07:28:24 م Scan Summary SAW\Admin Run time : 1:02:22
08/01/1429 07:28:24 م Scan Complete SAW\Admin On-Demand Scan
 
تأييد 0
السلام عليكم اخي الكريم

لوتكرمت ارفع التقرير الأخير على الموقع التالي www.zshare.net

بالانتظار ..
​
 
تأييد 0
أخي سلطان

هل تعاني من مشاكل في جهازك

التقارير حتى الان سليمة ولله الحمد
 
توقيع : البرونز
تأييد 0
اخي انا اعاني من مشكله بجهازي

تقلب احيانا الشاشه زرقاء فيها كتابات انجليزيه ولا يطفي الجهاز الا لزم اسحب البطاريه
 
تأييد 0
تأييد 0
S U L T A N قال:
اخي انا اعاني من مشكله بجهازي

تقلب احيانا الشاشه زرقاء فيها كتابات انجليزيه ولا يطفي الجهاز الا لزم اسحب البطاريه
أنقر للتوسيع...


أريدك أن ترفع لي الملفات التالية

الموجودة في المسار التالي

C:\WINDOWS\Minidump

إن كانت الملفات كثيرة قم بنسخ

اخر خمس ملفات حسب التاريخ

وضعها في مجلد واضغطها بأحد برامج

الضغط ثم ارفعها لي في احد مواقع الرفع

وضع لي الرابط لأقوم بتنزيل الملفات لأحلل

لك مشكلة الشاشة الزرقاء ان شاء الله
 
توقيع : البرونز
تأييد 0
ابحث في جهازك عن هذا الملف

tosrfusb.sys

فهو المسبب للشاشة الزرقاء

وشاهد اين يتواجد في جهازك
 
توقيع : البرونز
تأييد 0
الحالة
مغلق و غير مفتوح للمزيد من الردود.
عودة
أعلى